VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of SHA-3 finalists on one machine: amd64; Core 2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; gcc14, supercop-20220506

[Page version: 20240726 23:45:57]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Implementation notes

Graphs: old (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 5.01 5.02 5.02 T:blake2b 5.34 5.49 5.59 T:k12 5.89 5.89 5.89 T:blake2s 6.37 6.38 6.39 T:skein512512 6.38 6.38 6.40 T:skein512256 6.94 7.11 7.39 T:bblake256 7.19 7.20 7.20 T:blake32 7.32 7.35 7.38 T:blake64 7.43 7.48 7.54 blake512 7.64 7.66 7.68 T:keccakc256treed2 8.22 8.23 8.24 T:skein256256 8.91 8.92 8.93 blake256 9.39 9.44 9.48 T:skein10241024 9.69 9.76 9.88 sha512 9.70 9.77 9.92 sha384 10.31 10.32 10.32 shake128 10.36 10.40 10.45 T:keccakc512treed2 11.11 11.14 11.17 T:keccakc448 11.84 11.84 11.85 T:keccakc512 11.96 11.97 12.14 sha3224 12.59 12.73 12.80 T:keccak 12.79 12.81 12.89 sha3256 12.76 12.84 12.85 shake256 12.98 13.04 13.10 sha256 12.98 13.06 13.09 sha224 15.76 15.77 15.77 T:keccakc768 17.03 17.04 17.05 sha3384 17.60 17.77 17.83 T:jh384 17.71 17.79 17.83 T:jh256 17.75 17.82 17.84 T:jh512 17.67 17.85 17.95 T:jh224 19.88 20.06 20.13 T:round3jh256 20.03 20.08 20.10 T:round3jh512 21.78 21.88 21.89 T:keccakc1024 22.28 22.34 22.39 T:groestl256 23.68 23.70 23.76 sha3512 32.00 32.22 32.48 T:groestl512

Cycles/byte for 4096 bytes 25% 50% 75% hash 5.05 5.05 5.05 T:blake2b 5.74 5.78 5.82 T:k12 5.93 5.93 5.93 T:blake2s 6.53 6.54 6.54 T:skein512512 6.54 6.54 6.55 T:skein512256 7.44 7.44 7.44 T:blake32 7.65 7.66 7.67 T:blake64 7.74 7.76 7.78 blake512 7.81 7.82 7.95 T:bblake256 8.35 8.36 8.36 T:skein256256 9.03 9.03 9.04 T:keccakc256treed2 9.15 9.15 9.16 blake256 9.82 9.83 9.85 T:skein10241024 10.17 10.18 10.23 sha512 10.18 10.19 10.24 sha384 10.77 10.78 10.78 shake128 11.11 11.12 11.14 T:keccakc512treed2 11.62 11.62 11.64 T:keccakc448 12.35 12.35 12.35 T:keccakc512 12.42 12.42 12.51 sha3224 13.15 13.22 13.22 T:keccak 13.25 13.25 13.29 sha3256 13.26 13.30 13.30 shake256 13.32 13.34 13.36 sha256 13.33 13.36 13.37 sha224 15.85 15.85 15.86 T:keccakc768 17.07 17.07 17.07 sha3384 18.00 18.09 18.10 T:jh384 18.04 18.09 18.12 T:jh224 18.06 18.10 18.11 T:jh256 18.08 18.12 18.12 T:jh512 20.32 20.41 20.41 T:round3jh256 20.40 20.42 20.42 T:round3jh512 22.32 22.36 22.36 T:keccakc1024 23.03 23.04 23.04 T:groestl256 24.14 24.14 24.18 sha3512 34.24 34.28 34.40 T:groestl512

Cycles/byte for 1536 bytes 25% 50% 75% hash 5.08 5.11 5.12 T:blake2b 5.98 5.98 5.98 T:blake2s 6.25 6.32 6.34 T:k12 6.79 6.80 6.80 T:skein512512 6.80 6.81 6.81 T:skein512256 7.85 7.85 7.85 T:blake32 8.16 8.18 8.19 T:blake64 8.19 8.21 8.24 blake512 8.55 8.57 8.57 T:skein256256 9.01 9.01 9.15 T:bblake256 9.54 9.55 9.56 blake256 10.48 10.49 10.51 T:keccakc256treed2 10.48 10.49 10.50 T:skein10241024 10.84 10.86 10.92 sha384 10.87 10.88 10.92 sha512 11.53 11.53 11.53 shake128 11.89 11.90 11.91 T:keccakc448 12.34 12.34 12.35 T:keccakc512treed2 12.60 12.61 12.62 sha3224 12.89 12.89 12.90 T:keccakc512 13.71 13.72 13.72 sha3256 13.78 13.78 13.78 shake256 13.82 13.84 13.84 sha256 13.83 13.85 13.89 sha224 13.96 14.02 14.03 T:keccak 16.00 16.00 16.00 T:keccakc768 17.12 17.13 17.13 sha3384 18.60 18.61 18.62 T:jh256 18.60 18.61 18.62 T:jh512 18.54 18.61 18.62 T:jh224 18.59 18.62 18.63 T:jh384 20.94 20.99 20.99 T:round3jh256 20.98 21.00 21.00 T:round3jh512 23.16 23.16 23.16 T:keccakc1024 24.15 24.17 24.22 T:groestl256 24.88 24.89 24.89 sha3512 37.70 37.71 37.86 T:groestl512

Cycles/byte for 576 bytes 25% 50% 75% hash 5.81 5.82 5.83 T:blake2b 6.13 6.13 6.13 T:blake2s 7.16 7.18 7.21 T:k12 7.47 7.47 7.52 T:skein512512 7.51 7.51 7.53 T:skein512256 8.66 8.68 8.71 blake512 8.65 8.69 8.73 T:blake64 8.95 8.95 8.95 T:blake32 9.09 9.10 9.13 T:skein256256 10.60 10.63 10.64 blake256 11.60 11.62 11.66 sha384 11.67 11.70 11.72 sha512 12.41 12.41 12.42 shake128 12.56 12.61 12.65 T:bblake256 13.33 13.34 13.35 T:skein10241024 14.35 14.36 14.42 T:keccakc256treed2 14.69 14.70 14.70 T:keccakc512 14.71 14.73 14.80 T:keccakc448 14.78 14.81 14.81 T:keccak 15.16 15.18 15.21 sha256 15.18 15.22 15.27 sha224 15.34 15.34 15.35 sha3224 15.34 15.35 15.38 sha3256 15.40 15.45 15.45 shake256 17.43 17.44 17.45 T:keccakc768 18.34 18.35 18.36 sha3384 19.05 19.08 19.14 T:keccakc512treed2 19.83 19.88 19.96 T:jh224 19.89 19.95 19.97 T:jh512 19.94 19.95 19.96 T:jh384 19.94 19.96 19.97 T:jh256 22.50 22.50 22.50 T:round3jh256 22.51 22.51 22.51 T:round3jh512 25.57 25.61 25.61 T:keccakc1024 27.25 27.25 27.25 sha3512 27.24 27.26 27.31 T:groestl256 43.37 43.42 43.54 T:groestl512

Cycles/byte for 64 bytes 25% 50% 75% hash 7.25 7.25 7.25 T:blake2s 11.84 11.84 11.84 T:blake2b 15.56 15.56 15.56 T:skein512256 15.62 15.62 15.67 T:skein512512 15.77 15.77 15.89 T:skein256256 18.28 18.28 18.28 blake512 18.53 18.64 18.69 T:blake64 20.27 20.27 20.42 T:k12 22.33 22.33 22.34 T:blake32 24.14 24.22 24.38 blake256 25.45 25.52 25.84 sha384 25.84 25.88 26.78 sha512 28.67 28.80 28.80 sha3384 28.92 28.92 29.02 sha3224 29.08 29.08 29.08 sha3512 29.12 29.12 29.12 sha3256 29.20 29.20 29.52 shake256 29.30 29.30 29.38 shake128 29.45 29.64 29.66 T:keccakc1024 30.14 30.22 30.23 T:keccakc768 30.34 30.38 30.50 T:keccakc512 30.45 30.47 30.48 T:keccak 30.58 30.66 31.45 T:keccakc448 31.89 32.12 32.30 sha224 31.86 32.14 32.44 sha256 37.14 37.14 37.22 T:jh384 37.11 37.16 37.17 T:jh256 37.12 37.23 37.23 T:jh224 37.22 37.30 37.30 T:jh512 42.02 42.02 42.02 T:round3jh256 42.02 42.02 42.08 T:round3jh512 42.67 42.69 42.70 T:skein10241024 55.56 55.88 56.42 T:bblake256 65.61 65.86 66.42 T:groestl256 88.34 88.47 88.72 T:keccakc256treed2 88.27 88.67 88.95 T:keccakc512treed2 132.02 132.14 132.39 T:groestl512

Cycles/byte for 8 bytes 25% 50% 75% hash 59.50 60.00 60.00 T:blake2s 91.00 91.00 91.00 T:skein256256 91.62 91.62 92.88 T:blake2b 96.25 96.50 97.12 blake256 126.12 126.12 126.38 T:skein512256 126.62 126.62 126.62 T:skein512512 136.88 136.88 136.88 T:blake32 146.25 146.25 146.25 blake512 147.88 149.50 151.00 sha224 147.38 150.25 153.50 sha256 153.25 153.62 154.88 T:blake64 160.12 160.25 160.25 T:k12 204.88 205.62 206.75 sha384 207.00 207.88 214.25 sha512 229.50 229.50 231.00 sha3384 230.25 230.25 231.00 sha3224 230.88 231.00 231.00 sha3512 231.38 231.38 231.38 sha3256 233.00 233.00 233.88 shake256 233.25 233.25 233.88 shake128 236.88 236.88 237.12 T:keccakc1024 243.12 243.12 243.38 T:keccakc512 243.38 243.75 244.75 T:keccakc768 244.50 244.50 249.25 T:keccakc448 244.38 245.50 245.62 T:keccak 294.50 295.50 295.62 T:jh256 296.25 298.12 300.50 T:jh224 296.62 298.12 300.12 T:jh512 296.00 298.25 299.12 T:jh384 337.00 337.00 338.62 T:round3jh256 336.12 338.38 338.38 T:round3jh512 341.62 341.88 342.12 T:skein10241024 346.88 349.00 349.38 T:groestl256 369.50 371.12 372.88 T:bblake256 706.50 706.75 707.25 T:keccakc256treed2 705.25 708.62 709.75 T:keccakc512treed2 1052.88 1054.62 1055.25 T:groestl512